Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: ahBTzDm2MMdTM+HMe43HXxbRenMDbJmmKYIm33ycS/o=
Subject key identifier: C3:86:FC:36:7E:A4:E4:73:8C:05:B8:9B:B3:7C:D8:5F:9A:79:F1:85
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 01A0C8592A1978E13C47D897D9E011A98366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 1595
Signing time: Tue 22 Sep 2026 09:01:21 +0000
Manifest this update: Tue 22 Sep 2026 09:01:21 +0000
Manifest next update: Wed 23 Sep 2026 09:01:21 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: k2ATP5VfoZ60GU15vG255VDkM0qNdk+2QviOF14V858=)
2: FMKR3CaUlRK9liJAv-tSvgFdbCg.roa (hash: khLsIGfKCgMHIIEDU5+wjoIrC4R3I6oBgk6LSwjYqtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:2a:19:78:e1:3c:47:d8:97:d9:e0:11:a9:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Sep 22 09:01:21 2026 GMT
Not After : Sep 23 09:01:21 2026 GMT
Subject: CN=c386fc367ea4e4738c05b89bb37cd85f9a79f185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:d4:b2:7a:c5:33:13:ef:90:41:dc:ed:1e:
34:e4:ce:64:77:74:d6:ee:94:e9:e3:74:95:2e:be:
d1:64:80:69:46:25:73:4a:34:d1:d8:c8:4d:69:64:
92:23:7a:b8:a9:ce:88:93:82:69:1f:71:8c:44:80:
36:d5:04:51:26:a9:38:ab:d0:7f:75:95:32:b8:19:
79:7a:92:45:dd:48:c3:37:5c:27:aa:a6:b7:b7:03:
a9:39:ef:97:9c:cf:53:72:c8:5c:35:28:63:63:11:
70:3d:d7:29:16:ff:eb:06:9b:0d:8c:52:aa:e8:8b:
92:27:9d:6e:c0:ff:d1:86:dc:e9:15:76:df:f8:2d:
17:06:58:7a:cb:69:c3:71:8a:f0:d6:5d:36:1e:9d:
ce:52:24:4b:16:91:b1:84:a6:7f:57:44:9a:7b:ad:
10:9c:7c:8e:d3:e9:b4:32:ce:4d:34:fe:5f:16:c1:
73:f1:6b:ce:d8:c3:b5:68:9c:50:77:02:09:cc:d2:
0d:e8:ee:2f:72:8e:a1:b6:b5:3e:f8:45:ae:f4:db:
a2:84:ae:ae:1a:7d:46:c0:e7:db:6e:2d:d3:72:31:
09:27:3e:d7:99:b3:97:49:d2:79:5d:66:24:08:4f:
2f:61:c7:73:eb:83:41:b2:76:ac:b4:4e:4d:70:20:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:86:FC:36:7E:A4:E4:73:8C:05:B8:9B:B3:7C:D8:5F:9A:79:F1:85
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9c:6f:7e:f2:28:c2:5c:78:22:20:ab:e4:37:52:cc:2f:90:
cb:f2:48:f1:db:7e:9b:bb:fb:63:25:7f:7f:16:56:eb:6c:4a:
65:36:ad:02:90:a5:b0:59:ca:3d:61:e2:6d:21:d8:1f:0d:fa:
2e:5f:ca:5c:a0:cb:56:46:48:67:15:39:3e:90:fd:b3:6d:a2:
a5:2b:c8:94:15:09:78:44:a2:db:32:e8:c9:a8:b5:3e:e3:44:
19:7d:ff:ee:40:67:6a:a7:7f:1b:88:3e:f2:ec:32:ca:12:2e:
3e:aa:88:3c:35:39:3c:dd:fb:fa:14:6d:e4:2a:28:1c:ef:d6:
81:d3:ab:02:fb:c9:f4:c7:70:90:e8:ec:50:79:2e:3e:d7:71:
ce:85:bc:40:d5:22:54:a3:7e:c4:74:1d:5c:fc:d7:c8:f0:20:
a5:b6:70:1a:ed:30:84:59:56:50:8f:9c:29:56:f9:12:07:c5:
23:3b:fc:aa:a8:95:57:ec:3d:6e:d3:92:86:6c:51:24:a7:b9:
7f:b3:ed:03:5d:d2:4d:77:a5:70:08:08:ea:6e:d7:ec:8b:47:
9d:f7:84:ce:69:08:54:16:88:5a:0d:89:a7:94:df:e5:70:0a:
79:94:c9:19:74:fa:42:8a:12:df:cb:03:66:1a:66:38:d9:56:
55:56:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:32:27 2026 by rpki-client